improve documentation

dnsupdate_tlsa

@@ -170,7 +170,7 @@ dnsupdate_tlsa [options] zone dnsname
     -tsigname	Name of tsig key
     -tsigkey	tsig key
     -tsigalgo	tsig algorithm
-    -oldcert	old certificate, to remote TLSA record
+    -oldcert	old certificate, to remove TLSA record
     -cert	current certificate, to add TLSA record
 
 =head1 OPTIONS
@@ -181,6 +181,10 @@ dnsupdate_tlsa [options] zone dnsname
 
 Print a brief help message and exits.
 
+=item B<-verbose>
+
+Show what's going on.
+
 =item B<-server>
 
 DNS server to send DNS updates to.
@@ -189,6 +193,28 @@ DNS server to send DNS updates to.
 
 DNS port to send DNS updates to, default 53.
 
+=item B<-tsigname>
+
+Name of the TSIG key.
+
+=item B<-tsigkey>
+
+Base64 encoding of the TSIG key.
+
+=item B<-tsigalgo>
+
+Algorithm of the TSGI key, default hmac-md5.
+
+=item B<-oldcert>
+
+Certificate for which the corosponding TLSA record should be removed.
+At leas one one oldcert and one cert need to be provided.
+
+=item B<-cert>
+
+Certificate for which the corosponding TLSA record should be added.
+At leas one one oldcert and one cert need to be provided.
+
 =back
 
 =head 1 DESCRIPTION